Static task
static1
Behavioral task
behavioral1
Sample
ca99879dd814bdd92401ff299b37381b1d66215679916a7b5780a9fee97894e1.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ca99879dd814bdd92401ff299b37381b1d66215679916a7b5780a9fee97894e1.exe
Resource
win10v2004-20220812-en
General
-
Target
ca99879dd814bdd92401ff299b37381b1d66215679916a7b5780a9fee97894e1
-
Size
123KB
-
MD5
ea613e3e73f7ceaf8e1371fbd9b67886
-
SHA1
f32df11ffc9e1be7c3b47b16249de48b45573681
-
SHA256
ca99879dd814bdd92401ff299b37381b1d66215679916a7b5780a9fee97894e1
-
SHA512
02490cf07a5ece83b5ba5ac01f985e9165c18146d583f1fb9bd463a204b2cece20753624c1de401c365bbf8906aff5ef348b8514a9c9d404e0672195cf9fbcff
-
SSDEEP
3072:EyiFf33R9F9r3rOtsLVgb1kU7s93pk3e6+0JG:Fi1R9FhXB2iSsjwef
Malware Config
Signatures
Files
-
ca99879dd814bdd92401ff299b37381b1d66215679916a7b5780a9fee97894e1.exe windows x86
cbf29782f47e4a284bd763dc83419de5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
OpenFile
FindAtomA
DeleteAtom
OpenFileMappingA
FindAtomW
AddAtomW
CopyFileExW
WriteFile
GetFileTime
ReadFile
CopyFileA
CreateDirectoryA
GetLocalTime
GetStdHandle
GetCommandLineA
ExitThread
AddAtomA
GetCPInfo
CopyFileExA
GetFileType
DeleteFileA
FindClose
GetLastError
GetPriorityClass
DeleteFileW
CopyFileExW
DeleteFileW
GetCPInfo
GetStdHandle
FindClose
AddAtomA
GetLocalTime
GlobalFree
AddAtomW
FlushFileBuffers
ExitProcess
GetPriorityClass
FindAtomA
GetLastError
FatalExit
OpenFileMappingA
CreateDirectoryA
FindClose
WriteFile
DeleteFileA
OpenFile
ExitProcess
ReadFile
FindAtomA
GetStdHandle
AddAtomA
FreeResource
ExitThread
FlushFileBuffers
GlobalFree
CopyFileExA
GetLocalTime
FindAtomW
FindClose
OpenFileMappingA
FlushFileBuffers
AddAtomW
GetFileType
CopyFileA
ExitProcess
ReadFile
AddAtomA
GlobalFree
FindAtomA
FreeResource
GetCPInfo
DeleteFileW
DeleteFileW
GetCommandLineA
GetLocalTime
GetCPInfo
GetStdHandle
GetPriorityClass
CreateDirectoryA
CopyFileA
GlobalFree
FindAtomA
ReadFile
ExitProcess
FreeResource
FlushFileBuffers
GetFileType
GetLocalTime
AddAtomW
FindAtomW
FindAtomA
CopyFileA
AddAtomA
GlobalFree
GetCPInfo
CreateDirectoryA
DeleteAtom
FreeResource
GetFileTime
GetLastError
DeleteFileA
FatalExit
ReadFile
user32
GetMenu
AlignRects
AppendMenuA
CalcMenuBar
CopyIcon
IsMenu
BeginPaint
BlockInput
GetWindowTextLengthA
DrawTextW
DialogBoxParamA
LoadMenuA
DrawTextA
CloseWindow
GetDC
GetDlgItem
GetFocus
LoadMenuA
CalcMenuBar
AppendMenuW
GetDlgItem
DrawTextA
BlockInput
GetWindowTextLengthA
DrawTextW
GetDC
IsMenu
AlignRects
InsertMenuA
GetFocus
AppendMenuA
CopyIcon
DrawIconEx
GetMenu
BlockInput
CopyImage
DrawIconEx
GetFocus
IsWindow
EndDialog
InsertMenuA
CreateIcon
GetWindowTextLengthA
AlignRects
IsMenu
BeginPaint
CopyRect
GetWindowTextA
CopyIcon
DrawTextW
GetCursor
BlockInput
CloseWindow
DrawTextA
LoadMenuA
GetWindowTextA
AlignRects
DialogBoxParamW
CopyRect
DrawTextW
GetMenu
BeginPaint
GetWindowTextLengthA
DrawIconEx
advapi32
RegEnumKeyW
RegLoadKeyA
RegLoadKeyW
RegQueryValueW
RegEnumKeyExW
RegEnumValueW
RegDeleteKeyW
RegEnumValueA
RegEnumKeyExA
RegOpenKeyExW
RegQueryInfoKeyA
RegQueryValueA
RegDeleteValueW
RegFlushKey
RegCreateKeyExA
RegDeleteValueA
RegGetKeySecurity
Sections
.5ac1f Size: 30KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.0h5c7 Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.g3gh1 Size: 71KB - Virtual size: 387KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.e2ha9 Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 799B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ